--- title: Surface vulnerabilities in your AI services | daily.dev description: Dynatrace launched a ready-made dashboard that surfaces runtime vulnerabilities detected in AI services. It combines Runtime Vulnerability Analytics (RVA)... canonical: https://daily.dev/posts/surface-vulnerabilities-in-your-ai-services-emgzenytm twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Surface vulnerabilities in your AI services | daily.dev og:description: Dynatrace launched a ready-made dashboard that surfaces runtime vulnerabilities detected in AI services. It combines Runtime Vulnerability Analytics (RVA)... og:url: https://daily.dev/posts/surface-vulnerabilities-in-your-ai-services-emgzenytm og:image: https://api.daily.dev/og/posts/eMGZEnYTM.png og:image:alt: Surface vulnerabilities in your AI services og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Surface vulnerabilities in your AI services **[Dynatrace](https://daily.dev/sources/dynatrace)** · 4 min read · 1 upvotes · 0 comments ## Summary Dynatrace launched a ready-made dashboard that surfaces runtime vulnerabilities detected in AI services. It combines Runtime Vulnerability Analytics (RVA) findings with AI Observability data in one view. Four summary tiles show vulnerability findings, unique vulnerabilities, affected processes, and affected packages. Tables list each vulnerability's severity, CVSS score, and affected process and package counts. A Coverage section flags processes RVA isn't yet scanning, so a zero count is only reassuring when coverage is known to be complete. The dashboard requires AI Observability and RVA to be set up and is available now. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How can I detect runtime vulnerabilities specifically in my AI or LLM service dependencies? Dynatrace offers a ready-made dashboard combining Runtime Vulnerability Analytics (RVA) with AI Observability, focused only on GenAI Smartscape entities. It identifies AI processes, checks them for vulnerability scan events, and shows findings by severity, CVSS score, affected process count, and affected packages. Setup requires instrumenting AI Observability (OpenLLMetry recommended) and enabling RVA monitoring rules on those processes. _Teams securing AI pipelines can track tools like this as they evolve on daily.dev._ ### Why would a vulnerability dashboard show zero findings for my AI services even though I suspect issues exist? A zero count can be misleading if coverage is incomplete, meaning Runtime Vulnerability Analytics isn't actually scanning those processes yet. A dedicated coverage table lists every AI process and marks it as covered or 'Not covered,' prompting a check of monitoring rules; if no rows appear, either no AI processes are running or AI Observability isn't instrumented. _daily.dev helps engineers stay current on pitfalls like incomplete security coverage in AI monitoring setups._ ## Similar posts on daily.dev - [Vulnerability risk exposure: See exposure across monitored processes at runtime](https://daily.dev/posts/vulnerability-risk-exposure-see-exposure-across-monitored-processes-at-runtime-sycqbqbsg) · Dynatrace · 0 upvotes · 0 comments - [Malicious package detection with Runtime Vulnerability Analytics: Identify threats at runtime](https://daily.dev/posts/malicious-package-detection-with-runtime-vulnerability-analytics-identify-threats-at-runtime-sbb1zvtcr) · Dynatrace · 2 upvotes · 0 comments - [Why AI Applications Stay Exposed When Scans Pass](https://daily.dev/posts/why-ai-applications-stay-exposed-when-scans-pass-zh9xyhxsu) · Snyk · 0 upvotes · 0 comments - [Inside the Updated AI Governance Suite Dashboard \| Kovrr](https://daily.dev/posts/inside-the-updated-ai-governance-suite-dashboard-kovrr-pjflrp6rw) · Security Boulevard · 0 upvotes · 0 comments --- Tags: [#devops](https://daily.dev/tags/devops), [#appsec](https://daily.dev/tags/appsec), [#langchain](https://daily.dev/tags/langchain) [View this post on daily.dev](https://daily.dev/posts/surface-vulnerabilities-in-your-ai-services-emgzenytm) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Surface vulnerabilities in your AI services","url":"https://daily.dev/posts/surface-vulnerabilities-in-your-ai-services-emgzenytm","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/surface-vulnerabilities-in-your-ai-services-emgzenytm"},"datePublished":"2026-10-29T18:17:51.478Z","dateModified":"2026-10-29T18:23:45.865Z","description":"Dynatrace launched a ready-made dashboard that surfaces runtime vulnerabilities detected in AI services. It combines Runtime Vulnerability Analytics (RVA)...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/18ba9f17d3b8d5964fc199f4208059ba?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/18ba9f17d3b8d5964fc199f4208059ba?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Dynatrace","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Dynatrace","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/3ca5a9897e9748f4a39fa9736389609e","url":"https://daily.dev/sources/dynatrace"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/surface-vulnerabilities-in-your-ai-services-emgzenytm","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"devops,appsec,langchain","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Dynatrace","item":"https://daily.dev/sources/dynatrace"},{"@type":"ListItem","position":3,"name":"Surface vulnerabilities in your AI services"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/surface-vulnerabilities-in-your-ai-services-emgzenytm#faq","mainEntity":[{"@type":"Question","name":"How can I detect runtime vulnerabilities specifically in my AI or LLM service dependencies?","acceptedAnswer":{"@type":"Answer","text":"Dynatrace offers a ready-made dashboard combining Runtime Vulnerability Analytics (RVA) with AI Observability, focused only on GenAI Smartscape entities. It identifies AI processes, checks them for vulnerability scan events, and shows findings by severity, CVSS score, affected process count, and affected packages. Setup requires instrumenting AI Observability (OpenLLMetry recommended) and enabling RVA monitoring rules on those processes. Teams securing AI pipelines can track tools like this as they evolve on daily.dev."}},{"@type":"Question","name":"Why would a vulnerability dashboard show zero findings for my AI services even though I suspect issues exist?","acceptedAnswer":{"@type":"Answer","text":"A zero count can be misleading if coverage is incomplete, meaning Runtime Vulnerability Analytics isn't actually scanning those processes yet. A dedicated coverage table lists every AI process and marks it as covered or 'Not covered,' prompting a check of monitoring rules; if no rows appear, either no AI processes are running or AI Observability isn't instrumented. daily.dev helps engineers stay current on pitfalls like incomplete security coverage in AI monitoring setups."}}]} ```